CERT Polska has detailed a critical attack chain dubbed MikroTrick, combining an SSH state-machine flaw and an argument injection bug in MikroTik RouterOS (CVE-2026-67279 and CVE-2026-86060). This exploit chain allows threat actors to gain full administrative access to internet-facing routers without needing credentials or completed authentication. Immediate patching is strongly advised for all network administrators.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →